End-to-End Encryption Control in Multiparty Meetings Against Spoofing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing end-to-end encryption systems in online meetings are vulnerable to unauthorized users spoofing messages to dynamically enable or disable encryption, compromising security and confidentiality.
Innovation Solution
Implementing an encrypted process for dynamically enabling and disabling end-to-end encryption using encrypted messages that can only be decrypted on end-user participant devices, eliminating reliance on third-party servers to initiate these changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If end-to-end encryption is enabled in online meetings, then security and confidentiality of communication are improved, but the system becomes vulnerable to spoofing attacks where unauthorized users can send fake messages to disable encryption
Solution Approach 1:
The system performs preliminary actions by having all participants pre-generate their public keys before the meeting starts. The key orchestration server collects and stores these public keys in advance, creating a pre-established trust framework that prevents spoofing attacks during the actual encrypted communication session.
Solution Approach 2:
The key orchestration server acts as an intermediary that facilitates key exchange without having private keys itself. It mediates the distribution of public keys to participants and enables encrypted communication while maintaining security, as it never possesses the private keys needed to decrypt messages or initiate encryption changes.
2Ease of operation
If third-party servers are used to manage encryption sessions, then ease of operation is improved, but security is compromised because servers can potentially initiate unauthorized encryption changes
Solution Approach 1:
The invention extracts the private key management functionality from the third-party server and places it exclusively on participant devices. The key orchestration server is stripped of any ability to initiate encryption changes, retaining only the function of distributing public keys. This separation ensures that even if the server is compromised, it cannot unauthorizedly control encryption state.
Solution Approach 2:
Participant devices autonomously manage their own encryption capabilities using locally stored private keys. Each device independently decrypts messages and controls its own encryption state based on received encrypted commands, rather than relying on the server to manage encryption for them. This self-service approach eliminates the security risk of server-initiated encryption changes.
3Ease of operation
If encryption control messages are sent through the server, then ease of operation is improved, but the system becomes vulnerable to interception and spoofing of these control messages
Solution Approach 1:
The system applies preliminary anti-action by encrypting control messages with the recipient's public key before they traverse the network. This pre-encryption protects control messages from interception and spoofing, as any unauthorized user capturing these messages cannot decrypt or modify them without the recipient's private key.
Solution Approach 2:
The invention replaces the mechanical system of plain text control message transmission with cryptographic substitution. Control messages are transformed into encrypted form using public-key cryptography, substituting the vulnerable plaintext transmission mechanism with a secure encrypted communication channel that resists interception and spoofing.
Data Source
AI summary
A computer-implemented method for dynamically disabling an end-to-end encryption session within an online meeting session is provided. The method comprises engaging in an online meeting session in which an end-to-end encryption session is enabled. The method further comprises sending, to a key orchestration server, a first encrypted message in which the contents of the first encrypted message are instructions to disable the end-to-end encryption session. The method further comprises receiving, from the key orchestration server, a second encrypted message that indicates that a participant has initiated disabling of the end-to-end encryption session. In response to receiving the second encrypted message disabling the end-to-end encryption session while maintaining the online meeting session.